Abstract
Data as a Service (DaaS) builds on service-oriented technologies to enable fast access to data resources on the Web. However, this paradigm raises several new privacy concerns that traditional privacy models do not handle since they only focus on the service interface without taking into account privacy constraints related to the data exchanged with a DaaS during its invocation. In addition, DaaSs compositions may reveal also privacy-sensitive information. In this paper we propose a privacy formal model in order to extend DaaS descriptions with privacy capabilities. The privacy model allows a service to define a privacy policy and a set of privacy requirements. We propose also a privacy-preserving DaaS composition approach allowing to verify the compatibility between privacy requirements and policies in DaaS composition. We validate the applicability of our proposal with some experiments.
This is a preview of subscription content, log in via an institution.
Buying options
Tax calculation will be finalised at checkout
Purchases are for personal use only
Learn about institutional subscriptionsPreview
Unable to display preview. Download preview PDF.
References
Agrawal, S., Haritsa, J.R.: A framework for high-accuracy privacy-preserving mining. In: Proceedings of the 21st International Conference on Data Engineering, ICDE 2005, pp. 193–204. IEEE Computer Society, Washington, DC, USA (2005)
Barhamgi, M., Benslimane, D., Medjahed, B.: A Query Rewriting Approach for Web Service Composition. IEEE Transactions on Services Computing, TSC (January 2010)
Bertino, E., Yang, Y.: Privacy and ownership preserving of outsourced medical data. In: ICDE, pp. 521–532 (2005)
Carey, M.: Declarative data services: This is your data on soa. In: Proceedings of the IEEE International Conference on Service-Oriented Computing and Applications, p. 4. IEEE Computer Society, Washington, DC, USA (2007)
Clifton, C., Kantarcioǧlu, M., Doan, A., Schadow, G., Vaidya, J., Elmagarmid, A., Suciu, D.: Privacy-preserving data integration and sharing. In: DMKD 2004: Proceedings of the 9th ACM SIGMOD Workshop on Research Issues in Data Mining and Knowledge Discovery, pp. 19–26. ACM, New York (2004)
Feder, T., Ganapathy, V., Garcia-Molina, H., Motwani, R., Thomas, D.: Distributing data for secure database services. Technical Report 2007-23, Stanford InfoLab (June 2007)
Gil, Y., Cheung, W., Ratnakar, V., kin Chan, K.: Privacy enforcement in data analysis workflows. In: Finin, T., Kagal, L., Olmedilla, D. (eds.) Proceedings of the Workshop on Privacy Enforcement and Accountability with Semantics (PEAS 2007) at ISWC/ASWC 2007, Busan, South Korea. CEUR Workshop Proceedings, vol. 320. CEUR-WS.org (November 2007)
Gil, Y., Fritz, C.: Reasoning about the appropriate use of private data through computational workflows. In: Intelligent Information Privacy Management, Papers from the AAAI Spring Symposium, pp. 69–74 (March 2010)
Hacigümüş, H., Iyer, B., Li, C., Mehrotra, S.: Executing sql over encrypted data in the database-service-provider model. In: Proceedings of the 2002 ACM SIGMOD International Conference on Management of Data, SIGMOD 2002, pp. 216–227. ACM, New York (2002)
Hore, B., Mehrotra, S., Tsudik, G.: A privacy-preserving index for range queries. In: Proceedings of the Thirtieth International Conference on Very Large Data Bases, VLDB 2004, pp. 720–731. VLDB Endowment (2004)
Kawamoto, J., Yoshikawa, M.: Security of social information from query analysis in daas. In: Proceedings of the 2009 EDBT/ICDT Workshops, EDBT/ICDT 2009, pp. 148–152. ACM, New York (2009)
Lee, Y., Werner, J., Sztipanovits, J.: Integration and verification of privacy policies using DSML’s structural semantics in a SOA-based workflow environment. Journal of Korean Society for Internet Information 10(149), 09/2009 (2009)
Mohammed, N., Fung, B.C.M., Wang, K., Hung, P.C.K.: Privacy-preserving data mashup. In: EDBT 2009: Proceedings of the 12th International Conference on Extending Database Technology, pp. 228–239. ACM, New York (2009)
Mrissa, M., Tbahriti, S.-E., Truong, H.-L.: Privacy model and annotation for DaaS. In: Antonio Brogi, G.A.P., Pautasso, C. (eds.) European Conference on Web Services (ECOWS), pp. 3–10 (December 2010)
Ngu, A.H.H., Carlson, M.P., Sheng, Q.Z., Paik, H.-y.: Semantic-based mashup of composite applications. IEEE Trans. Serv. Comput. 3, 2–15 (2010)
Pang, H., Shen, J., Krishnan, R.: Privacy-preserving similarity-based text retrieval. ACM Trans. Internet Technol. 10, 4:1–4:39 (2010)
Truong, H.L., Dustdar, S.: On analyzing and specifying concerns for data as a service. In: Kirchberg, M., Hung, P.C.K., Carminati, B., Chi, C.-H., Kanagasabai, R., Valle, E.D., Lan, K.-C., Chen, L.-J. (eds.) APSCC, pp. 87–94. IEEE, Los Alamitos (2009)
Tumer, A., Dogac, A., Toroslu, I.H.: A semantic-based user privacy protection framework for web services. In: Mobasher, B., Anand, S.S. (eds.) ITWP 2003. LNCS (LNAI), vol. 3169, pp. 289–305. Springer, Heidelberg (2005)
W3C. The Platform for Privacy Preference Specification (2004)
Weise, T., Bleul, S., Comes, D., Geihs, K.: Different approaches to semantic web service composition. In: Proceedings of the 2008 Third International Conference on Internet and Web Applications and Services, pp. 90–96. IEEE Computer Society, Washington, DC, USA (2008)
Xu, Y., Wang, K., Zhang, B., Chen, Z.: Privacy-enhancing personalized web search. In: Proceedings of the 16th international conference on World Wide Web, WWW 2007, pp. 591–600. ACM, New York (2007)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2011 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Tbahriti, SE., Mrissa, M., Medjahed, B., Ghedira, C., Barhamgi, M., Fayn, J. (2011). Privacy-Aware DaaS Services Composition. In: Hameurlain, A., Liddle, S.W., Schewe, KD., Zhou, X. (eds) Database and Expert Systems Applications. DEXA 2011. Lecture Notes in Computer Science, vol 6860. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-23088-2_14
Download citation
DOI: https://doi.org/10.1007/978-3-642-23088-2_14
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-642-23087-5
Online ISBN: 978-3-642-23088-2
eBook Packages: Computer ScienceComputer Science (R0)